Поиск уязвимостей
Количество 4
Количество 4
CVE-2025-33042
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0. Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue.
CVE-2025-33042
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0. Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue.
GHSA-rp46-r563-jrc7
Apache Avro Java SDK is Vulnerable to Code Injection
ALT-PU-2026-19780
ALT-PU-2026-19780: package `python3-module-avro` update to version 1.11.5-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-33042 Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0. Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue. | CVSS3: 5.6 | 1% Низкий | 9 месяцев назад |
 | CVE-2025-33042 Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0. Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue. | CVSS3: 7.3 | 1% Низкий | 9 месяцев назад |
| GHSA-rp46-r563-jrc7 Apache Avro Java SDK is Vulnerable to Code Injection | 1% Низкий | 9 месяцев назад | |
| ALT-PU-2026-19780 ALT-PU-2026-19780: package `python3-module-avro` update to version 1.11.5-alt1 | CVSS3: 7.3 | 9 месяцев назад |
Уязвимостей на страницу